PT-2010-4255 · Microsoft · Windows Vista+4

Published 2010-09-07 · Updated 2024-06-24 · CVE-2010-2739

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Microsoft Windows Server 2003 R2 Enterprise SP2 Microsoft Windows Vista Business SP1 Microsoft Windows 7 Microsoft Windows Server 2008 SP2

Description The issue is related to a buffer overflow in the CreateDIBPalette function in win32k.sys, which allows local users to cause a denial of service (crash) and possibly execute arbitrary code. This can be achieved by performing a clipboard operation with a crafted bitmap that contains a large number of colors, utilizing the GetClipboardData API function.

Recommendations For Microsoft Windows XP SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 R2 Enterprise SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista Business SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2, update to a newer version to mitigate the risk.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2739

Affected Products

Windows 7

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 8

• 🔥 https://exploit-db.com/exploits/14566 · Exploit
• 🔥 http://ragestorm.net/blogs/?p=255 · Exploit
• https://msrc.microsoft.com/blog/2010/08/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2739 · Security Note
• http://vupen.com/english/advisories/2010/2029 · Vendor Advisory
• http://secunia.com/advisories/40870 · Vendor Advisory
• http://blogs.technet.com/b/msrc/archive/2010/08/10/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability.aspx · Vendor Advisory
• https://t.me/cvenotify/84196 · Telegram Post